{"action":"created","issue":{"url":"https://api.github.com/repos/ah8r/csrf/issues/4","repository_url":"https://api.github.com/repos/ah8r/csrf","labels_url":"https://api.github.com/repos/ah8r/csrf/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/ah8r/csrf/issues/4/comments","events_url":"https://api.github.com/repos/ah8r/csrf/issues/4/events","html_url":"https://github.com/ah8r/csrf/issues/4","id":210730318,"number":4,"title":"requests to JPEG files being massively flagged as vulnerable to csrf","user":{"login":"starbuck3000","id":1936915,"avatar_url":"https://avatars2.githubusercontent.com/u/1936915?v=3","gravatar_id":"","url":"https://api.github.com/users/starbuck3000","html_url":"https://github.com/starbuck3000","followers_url":"https://api.github.com/users/starbuck3000/followers","following_url":"https://api.github.com/users/starbuck3000/following{/other_user}","gists_url":"https://api.github.com/users/starbuck3000/gists{/gist_id}","starred_url":"https://api.github.com/users/starbuck3000/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/starbuck3000/subscriptions","organizations_url":"https://api.github.com/users/starbuck3000/orgs","repos_url":"https://api.github.com/users/starbuck3000/repos","events_url":"https://api.github.com/users/starbuck3000/events{/privacy}","received_events_url":"https://api.github.com/users/starbuck3000/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-02-28T09:24:13Z","updated_at":"2017-03-01T03:20:44Z","closed_at":null,"body":"Hi, \r\nI ran a scan this morning with the extension running and most JPEG files were flagged as vulnerable to csrf (rating: tentative). An option to disable this behavior or to setup some sort of threshold value (i.e.: don't report 'tentative' confidence level or lower) would definitely help."},"comment":{"url":"https://api.github.com/repos/ah8r/csrf/issues/comments/283233640","html_url":"https://github.com/ah8r/csrf/issues/4#issuecomment-283233640","issue_url":"https://api.github.com/repos/ah8r/csrf/issues/4","id":283233640,"user":{"login":"ah8r","id":1014073,"avatar_url":"https://avatars1.githubusercontent.com/u/1014073?v=3","gravatar_id":"","url":"https://api.github.com/users/ah8r","html_url":"https://github.com/ah8r","followers_url":"https://api.github.com/users/ah8r/followers","following_url":"https://api.github.com/users/ah8r/following{/other_user}","gists_url":"https://api.github.com/users/ah8r/gists{/gist_id}","starred_url":"https://api.github.com/users/ah8r/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ah8r/subscriptions","organizations_url":"https://api.github.com/users/ah8r/orgs","repos_url":"https://api.github.com/users/ah8r/repos","events_url":"https://api.github.com/users/ah8r/events{/privacy}","received_events_url":"https://api.github.com/users/ah8r/received_events","type":"User","site_admin":false},"created_at":"2017-03-01T03:20:44Z","updated_at":"2017-03-01T03:20:44Z","body":"Would a feature similar to Burp's native \"exclude from scope\" be a solution here? So you could add a regex match for files ending in \\.jpe?g and the extension would exclude them from scanning."}}
{"actor":{"display_login":"ah8r"}}